Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
File: 00vPISevCy4KJGrkV0MEx653Fek.mft (raw, json)
Hash identifier: jZJcm+5m+86kwtrUT8xYkWTbtuVP8xgvS+Xeq7yNugc=
Subject key identifier: 42:C3:3A:BC:D1:AE:D1:2D:34:8A:34:F2:7D:A5:16:CE:2B:22:76:82
Authority key identifier: D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
Certificate issuer: /CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Certificate serial: 019D37C102E1E9A5C897595A0E203E77737D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:01:29 +0000
Manifest this update: Sun 29 Mar 2026 04:01:29 +0000
Manifest next update: Mon 30 Mar 2026 04:01:29 +0000
Files and hashes: 1: 00vPISevCy4KJGrkV0MEx653Fek.crl (hash: MdbVuzljfkNbojKv7kEBxBzY+pua1XbT94Mw8jK/xi8=)
2: LNdrd32mL4o15Pj5JcWmBKR2Q2I.roa (hash: hLgQdqBGoRGoVp14crN6xd2B0BaQtU78dsrL7Dz6tOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:02:e1:e9:a5:c8:97:59:5a:0e:20:3e:77:73:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Validity
Not Before: Mar 29 04:01:29 2026 GMT
Not After : Mar 30 04:01:29 2026 GMT
Subject: CN=42c33abcd1aed12d348a34f27da516ce2b227682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f1:d7:d8:b4:57:b9:96:0a:7d:f7:fe:43:72:
d1:8d:50:40:e1:96:6e:61:5a:a6:a8:38:56:63:2d:
ad:27:ff:cb:d9:ff:23:2e:dc:d3:f1:f6:d9:b5:ae:
0b:f2:a7:22:81:05:d0:80:02:98:3d:22:9c:62:ed:
eb:32:d7:fa:cf:d5:c9:50:3a:9a:76:1a:5a:14:15:
b9:e8:a5:80:00:75:e3:08:fb:0a:78:82:b2:68:a1:
32:76:f1:e7:64:a1:88:94:56:61:ef:7b:c8:3b:6d:
ef:f2:3a:23:0e:fe:07:07:16:77:de:30:c4:ef:57:
b1:37:72:df:44:b0:d5:87:d1:4c:d4:1b:2d:d8:59:
3b:f1:eb:2d:2a:84:e4:5c:d6:d7:21:dd:65:a9:b2:
2a:10:57:89:c9:20:a0:63:88:82:a1:07:eb:a0:50:
3e:8c:32:aa:95:42:f1:2e:b0:54:d3:81:b8:1c:a3:
95:65:66:f9:e4:2c:86:a3:ff:a9:5f:c3:a8:f0:0d:
a7:f7:62:5f:55:f7:2a:87:a9:f4:3e:d6:26:ad:04:
26:12:f0:6d:db:a2:b8:80:31:86:0e:b6:6a:dd:d4:
0b:47:5a:a7:28:dc:1e:4c:80:4d:cd:1e:86:39:fe:
b6:14:32:0b:c4:25:c5:da:3a:b5:8f:4e:97:e2:86:
f9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C3:3A:BC:D1:AE:D1:2D:34:8A:34:F2:7D:A5:16:CE:2B:22:76:82
X509v3 Authority Key Identifier:
keyid:D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:eb:5f:fb:61:ad:5c:1d:f3:73:d8:e5:cc:58:36:0a:05:19:
2d:a7:e1:d8:4f:3f:6a:ee:ec:b5:d6:32:76:35:46:ff:90:f0:
7c:6f:2a:4c:d0:19:78:8f:45:ea:11:dd:76:9b:e7:fd:56:bb:
c1:e9:b0:30:6e:ce:5a:07:4a:e2:10:b0:7f:9f:02:53:2a:67:
86:1e:ec:13:d1:0c:ab:5f:54:8c:9f:22:98:11:60:a8:75:0d:
3a:ad:28:95:e9:b7:76:23:7a:c2:47:2a:8d:69:74:d4:9d:6b:
c2:c6:09:4c:96:16:71:33:f6:c2:aa:8f:22:0e:10:11:cd:4c:
33:b1:33:e8:3f:3c:24:c0:e2:70:79:79:37:86:f9:99:29:22:
57:21:07:2a:bd:7a:e7:2e:6d:e9:1a:ab:65:40:fd:cc:dd:ef:
8e:3c:fe:e8:dd:18:55:f7:ea:a5:f6:f1:ca:ee:61:28:fb:de:
a8:11:31:62:2c:0d:e2:bd:00:21:93:44:2e:38:ae:41:e4:4b:
59:fc:01:4c:b5:da:e7:39:69:8e:a0:de:c3:f2:26:d3:04:e4:
23:d0:9f:c1:6a:33:6e:f9:e6:6c:54:96:43:a4:0d:00:8b:8a:
2f:94:b2:59:6c:61:68:b5:4e:b0:39:e3:6b:a1:40:12:a0:ef:
41:d2:29:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:41 2026 by rpki-client